About the Role
Start your career with John & Smith Solutions. As an Executive Assistant , you will support UK operations across GDPR, compliance, operations, and management coordination. This is a great opportunity for a fresher who wants to learn, take initiative, and grow in a professional international environment.
Key Responsibilities
Requirements
What You'll Gain
Build and launch the GSOC from inception to full maturity
Lead 24/7 SOC operations, monitoring, threat detection & incident response
Recruit, train & manage SOC teams (Tier 1–3)
Implement & optimize SIEM, SOAR, EDR, TIP & security tool stack
Develop SOC processes, IR playbooks, SLAs, KPIs, dashboards
Conduct threat hunting, threat intelligence & major incident handling
Ensure compliance (ISO 27001, SOC 2, GDPR, DPDP, PCI, HIPAA)
Manage client communication, reporting & escalations
Drive automation, SOC maturity improvements & operational excellence
Btech, BE, Bsc CS, BCA or equivalent
8–12 years in cybersecurity with 3–5 years in SOC leadership
Hands-on SIEM experience (Splunk / QRadar / Sentinel)
Strong incident response, threat intel, threat hunting expertise
Certifications preferred: GCIH, GSOC, CISSP, CISM, CEH, Splunk Certified
Experience managing 24/7 shifts and global clients
Expert: SIEM, SOAR, EDR, IDS/IPS, Vulnerability Management
Strong: MITRE ATT&CK, NIST CSF, ISO 27001, SOC 2
Cloud security (AWS/Azure/GCP), network security, scripting (Python/PowerShell)
Leadership, communication & stakeholder management
Salary ₹15–25 LPA performance bonuses
Build a GSOC from ground up, high-impact leadership role
Advanced certification sponsorships & conference budgets
Modern GSOC facility at Lulu Twin Towers
Global exposure with multi-industry clients
Health insurance, flexible benefits & growth path toward Director/CISO roles
neXavault, the cybersecurity arm of John & Smith Solutions, is a CERT-In and CREST approved organization providing comprehensive security solutions across India and internationally. With our recent CERT-In empanelment as an Information Security Auditing Organization, we're positioned for exponential growth in government and enterprise segments. Our team delivers specialized cybersecurity services from offices in Kozhikode, Kochi, Trivandrum, Mumbai, Hyderabad, Noida, Bangalore, Middle East, and UK.
We're seeking a dynamic Technical Proposal Manager to spearhead our tender management and proposal development initiatives. With our CERT-In empanelment opening doors to high value government contracts and our expansion into PAN-India markets, this role is critical to capturing strategic opportunities. You'll be at the forefront of our business development, converting our technical expertise into winning proposals for projects.
Key Responsibilities
Tender & GeM Portal Management
Manage end-to-end tender lifecycle on GeM (Government e-Marketplace) portal
Monitor and identify relevant tenders from GeM, CPP Portal, and state government portals
Handle vendor registration, documentation, and compliance requirements
Manage bid submissions, clarifications, and post-tender negotiations
Maintain tender tracking database and submission calendar
Ensure timely EMD/tender fee submissions and documentation
Technical Proposal Development
Write compelling technical proposals for cybersecurity services including:
Vulnerability Assessment & Penetration Testing (VAPT)
ISO 27001 implementation and auditing
Security Operations Center (SOC) setup
Incident response and forensics services
Compliance audits (CERT-In, RBI, IRDAI guidelines)
Translate complex technical capabilities into clear value propositions
Develop case studies, project references, and credential presentations
Create solution architectures and implementation methodologies
Prepare competitive pricing strategies and commercial proposals
Stakeholder Coordination
Collaborate with technical teams to gather solution requirements
Coordinate with finance for pricing and commercial terms
Liaise with legal for contract reviews and compliance
Work with delivery teams for project timelines and resource planning
Interface with partners and OEMs for joint proposals
Essential Requirements
Experience: 4-7 years in proposal writing and tender management, preferably in IT/Cybersecurity domain
GeM Expertise: Hands-on experience with GeM portal operations, bidding processes, and vendor management
Technical Writing: Exceptional writing skills with ability to articulate complex technical solutions
Domain Knowledge:
Understanding of cybersecurity services and solutions
Familiarity with government procurement processes
Knowledge of tender documentation (RFP, RFQ, EOI analysis)
Skills:
Proficiency in MS Office suite, especially advanced Word and Excel
Experience with proposal management tools
Strong attention to detail and deadline management
Excellent communication and coordination abilities
Preferred Qualifications
Experience with CERT-In empanelled organizations
Knowledge of cybersecurity frameworks (ISO 27001, NIST, CIS)
Understanding of Indian regulatory landscape (IT Act, DPDP Act)
Experience with international tenders and proposals
Certification in proposal writing or business development
Track record of winning high-value tenders
What Makes You Successful
Proven ability to win government tenders with 30%+ success rate
Experience managing multiple proposals simultaneously (5-10 active bids)
Strategic thinking to identify and pursue right opportunities
Ability to work under pressure and meet strict deadlines
Self-motivated with strong ownership mindset
What We Offer
Competitive Package + performance incentives on successful bids
Growth Impact: Direct contribution to company's expansion strategy
Diverse Exposure: Work on tenders across banking, government, PSU, and enterprise sectors
Success Bonus: Attractive incentives for winning high-value contracts
Skill Development: Training on cybersecurity domains and advanced proposal techniques
Career Growth: Clear progression path to Business Development leadership roles
Strategic Role: Direct interaction with senior management on growth initiatives
Location
Primary: Kochi/Kozhikode, Kerala
(Office-based role with occasional travel for pre-bid meetings)
How to Apply
Send your detailed CV along with:
List of major tenders won (with contract values)
Sample technical proposal section you've written (2-3 pages, sanitized)
Your GeM portal experience and success stories
Subject Line: Technical Proposal Manager – “Your Name”
Why This Role Matters
As our Technical Proposal Manager, you'll be instrumental in leveraging our CERT-In empanelment to capture government and enterprise opportunities. Your work will directly impact our growth, making you a key player in neXavault's expansion story.
Join us in building India's most trusted cybersecurity consulting firm. Your proposals will shape how organizations protect their critical assets and data.
Application Deadline: Immediate requirement - Apply now!
We’re Hiring | Customer Relationship Executive
📍 Govt Cyberpark Kozhikode
John & Smith is looking for a proactive and customer-focused Customer Relationship Executive to join our growing team. If you have strong communication skills and experience handling customers or bookings, we’d love to hear from you!
🔹 Position Details
Job Title: Customer Relationship Executive
Qualification: Bachelor’s Degree
Experience: 1 to 2 years
🔹 Key Responsibilities
• Handle inbound and outbound calls related to client bookings and service requests
• Maintain accurate booking records and regularly update the CRM system
• Coordinate with operations and staffing teams for timely shift allocation
• Address client queries and concerns while ensuring high service standards
• Support the booking team with daily reports and follow-up communications
🔹 Required Skills & Competencies
• Strong communication and customer service skills
• Good computer proficiency (MS Office, CRM systems)
• Excellent coordination and multitasking abilities
• Positive attitude with a strong team-oriented mindset
• Fluency in English
🔹 Preferred Background
Healthcare staffing, BPO, customer service, or HR support
neXavault, the cybersecurity arm of John & Smith Solutions, is a CERT-In empanelled Information Security Auditing Organization. With our expanding presence across India and international markets, we're the trusted partner for organizations seeking robust security compliance and governance frameworks. Our 100% certification success rate speaks to our expertise in navigating complex regulatory landscapes
We're seeking a Senior Compliance & GRC Consultant to lead our rapidly growing compliance practice. You'll guide enterprise clients through their security certification journeys, from initial gap assessments to successful certification audits. With our new CERT-In empanelment opening doors across PAN-India markets, this role offers exceptional growth potential.
Key Responsibilities
Lead ISO 27001, ISO 27701, and ISO 20000-1 implementation projects from initiation to certification
Conduct comprehensive gap assessments and maturity evaluations
Design and implement Information Security Management Systems (ISMS)
Perform internal audits and prepare organizations for certification audits
Develop information security policies, procedures, and controls
Guide clients through SOC 2 Type I & II compliance journeys
Ensure compliance with Indian regulations (CERT-In directives, RBI guidelines, DPDP Act)
Conduct risk assessments using ISO 31000 and NIST frameworks
Lead business continuity and disaster recovery planning initiatives
Manage multi-framework compliance programs for enterprise clients
Train client teams on security awareness and compliance requirements
Essential Requirements
Experience: 5+ years in information security compliance and GRC
Certifications (Mandatory):
ISO 27001 Lead Auditor (IRCA/PECB/Exemplar certified)
ISO 27001 Lead Implementer
Certifications (Preferred):
CISA, CRISC, or CGRC
ISO 22301, ISO 27701, or ISO 27017/27018 credentials
Domain Expertise:
Proven track record of successful ISO 27001 implementations (minimum 5 projects)
Deep understanding of Indian regulatory landscape
Experience with risk assessment methodologies
Knowledge of data privacy regulations (DPDP, GDPR)
Skills:
Excellent stakeholder management and communication
Strong documentation and technical writing abilities
Project management capabilities
Ability to translate technical risks into business language
Preferred Qualifications
CERT-In empanelment experience
Banking sector compliance (RBI guidelines, PCI DSS)
Healthcare compliance (HIPAA, ABDM)
Experience with GRC tools (MetricStream, ServiceNow, Archer)
Cloud compliance frameworks (CSA CCM, ISO 27017)
Certified Data Privacy Officer (CDPO) or equivalent
What We Offer
Competitive Package
High-Value Projects: Lead compliance engagements worth ₹28-50 lakhs
CERT-In Advantage: Leverage our empanelment for prestigious government projects
Professional Growth: Clear path to Practice Head role
Certification Support: Funding for advanced certifications
Diverse Portfolio: Work across banking, healthcare, technology, and government sectors
Thought Leadership: Opportunity to develop frameworks and methodologies
Location: Kochi
How to Apply:
Send your detailed CV along with:
List of ISO 27001 implementations you've led (with outcomes)
Brief case study of your most complex compliance project
Sample ISMS document you've developed (sanitized)
Responsibilities:
Perform source code reviews (manual + automated) across diverse technologies.
Utilize tools like Checkmarx, SonarQube, Fortify, or Veracode for SAST analysis.
Identify, prioritize, and report security vulnerabilities with actionable remediation guidance.
Collaborate with developers, architects, and security teams to improve secure coding practices.
Contribute to Secure SDLC and DevSecOps initiatives.
Stay updated on OWASP Top 10, SANS25, CWE, and emerging threats.
Requirements:
5-6 years of experience in application security & source code review.
Proficiency in multiple programming languages (Java, .NET, Python, JavaScript, C/C++).
Strong hands-on experience with Checkmarx, SonarQube.
Good knowledge of SAST, DAST, vulnerability assessment, penetration testing.
Relevant certifications (CEH, OSCP, SANS25, LPT, CEPT, ISTQB Foundation or Advanced) preferred.
Skills:
Source Code Review
Multiple Languages
Checkmarx
SonarQube
Certifications (CEH/OSCP/SANS25/LPT/CEPT)
Industry Type: IT / Cyber Security
Department: Engineering – Software and QA
Role Category: Quality Assurance and Testing
Education:
UG: B.Tech/B.E. in Any Specialization
PG: Any Postgraduate
Key Skills:
Code Review
Python
OSCP
CEH
Vulnerability Assessment
Programming Languages
JavaScript
DAST
Java Application Security
Penetration Testing
SAST
DevSecOps
SSDLC Programming